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CLAIMS: 

1 1/ A method of securely providing da a to a user' s system over a web broadcast infrastructure 

2 ^ with a plurality of channels, the method comprising the steps of: 

3 encrypting the data using a first en crypting key; 

using a second encrypting key; 

related to at least part of the encrypted data on a first 



4 
5 
6 
7 
8 
9 



encrypting the fi rst decrypting key 




broadcasting promotional metadat; 
web broadcast channel fro reception by at least or^user's system; 

broadcasting at least part of the encrypted data over a second broadcast channel; and 
transferring the encrypted first decrypting key, which has been encrypted with the second 
encrypting key, to the user's system via a computer readable medium. 

2.7 The methoj^ as defined in claim 1, wherein the step of broadcasting the promotional 
'etadata includes broadcasting the promotional metadata periodically over a predetermined time 
interval. 



SE9-99-020 



164 



EXPRESS MAIL NO. EJ470370785US 



1 V 3v The method as defined in claim 1, wherein the step of broadcasting the promotional 

2 T^A/jnetadata includes the sup-step of: 

ffi^/ converting at least pe promotional meta data into a format readable by a web browser; 



1 

2 
3 



4. The method as defined in claim 1, wherein the step of broadcasting at least part of the 
encrypted data includes broadcasting a schedule of the broadcast time and web broadcast channel 
for at least part of the encrypted data; 

5. The method as defined in clairi 1, wherein the step of broadcasting at least part of the 
encrypted data over a second web broadcast charmel includes broadcasting the encrypted data 



in a format compatible with DirecPC 



TM 



67) The method as defined ^claim 1, wherein the promotional metadata contains a schedule 
m broadcast times for the/data. 
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A method of securely receiving data on a user' s system from a web broadcast infrastructure 
/with a plurality of channels, the method comprising the steps of: 

receiving promotional metadata from a first web broadcast channel, the promotional 
metadata related to data available fcr reception; 

assembling at least part of the promotional metadata into a promotional offering for review 
by a user; 



received related to the promotional metadata; 

d web broadcast channel, the data selected from the 

n the data has been previously encrypted using a first 



selecting by a user, data to be 

receiving data from a secq 
promotional metadata, and when 
encrypting key; and 

receiving the first decrypting kjby via a computer readable medium, the first decrypting key 
for decrypting at least some of the |ata received via the second web broadcast channel. 




8. ) The method as defined in claim 7, wherein the step of assembling at least part of the 
romotional data includes/assembling at least part of the promotional data into a format readable 
by a web browser and wHerein the step of selecting includes selecting with a web browser. 



1 9. The method as defined in claim 7, wherein the step of selecting includes selecting 

2 promotional material that have been previously received and stored on the user's system. 

1 1 0. The method as defined in claim 9, wherein the step of selecting further comprises the sub- 

2 steps of: 

3 determining the/schedule for the next web broadcast of the data selected; 

4 setting a trigger jco trigger the user' s system to receive the next web broadcast on the second 

5 channel. 



1 11. The method as defined in claim 1 0, wherein the step of receiving data from a second web 

2 broadcast channel, Includes receiving the data selected from the promotional metadata on a web 

3 broadcast channel/ and a time provided by the trigger. 
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1 12. The method as defined in claim 7, wherein the step of receiving data from a second web 
broadcast channel includes receiving data in a format compatible with DirecPC^'^. 

l-^>K^r 13/ The method as defined claim 7, wherein the step of receiving data from a second web 

^^^oadcast channel include the sub-step of: / 

3^ authorizing over a back channel that the user's system is authorized to receive the data 

4 ( selected; and wherein the step of receiving the ^rst decrypting key includes receiving the first 

5 decrypting key only if the user's system is aumorized to receive the data selected. 

1 14. The method as defined claim 7, wherein the step of receiving data from a second web 

2 broadcast channel further includes the /ub-step of: 

3 notifying the user the next time me user starts the user's system a status if the data selected 

4 from the promotional metadata has4)een received on the user's system. 

1 15. The method as defined in'^ claim 7, wherein the step of receiving the first decrypting key, 

2 includes receiving the first decrypting key that has been encrypted with a second encrypting key. 

1 1 6. The method as defined in claim 1 5, wherein the step of receiving the first decrypting key 

2 includes receiving the fi/st decrypting key over a broadcast stream. 

1 1 7. The method defined in claim 1 5, wherein the second decrypting key is sent to the user's 

2 system from a cleamnghouse. 

1 18. The method defined in claim 15, wherein the second decrypting key has a timeout 

2 provision for decrypting data that has been encrypted with the second encryption key is sent to 

3 the user's system from a clearinghouse. 
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1 \9^K system for securely pro vidii ig data to a user' s system over a web broadcast infrastructure 

2 with a plurality of channels, the sy^em comprismg: 

3 a content system; 

4 a first public key; 

5 a first private key, which corresponds to the first public key; 

6 a data encrypting key; 

7 a data decrypting key for decry )ting data encrypted using the data encrypting key; 

8 first data encryption means for encrypting data so as to be decryptable only by the data 

9 decrypting key; 

1 0 second data encryption means, u; ing the first public key, for encrypting the data decrypting 

>y key; 

) 1 2 a clearing house ; 

1 3 a broadcast center, for broadcasting to one or more user' s systems on a first web broadcast 

14 channel, promotional metadata related to data being broadcasted on a second web broadcast 

15 charmel, and broadcasting on the second broadcast channel data encrypted with the data 

16 encrypting key; 

1 7 first transferring means for transferring the data decrypting key which has been encrypted 

18 to the clearing house, wherein the clemnghouse possesses the first private key; 

1 9 first decrypting means for decrypjting the data decrypting key using the first private key; 

20 a second public key; 

21 a second private key; which corresponds to the second public key; 

22 re-encryption means for re-encryming the data decrypting key using the second public key; 

23 second transferring means for transferring the re-encrypted data decrypting key to the user's 

24 system, wherein the user's system possesses the second private key; and 

25 second decrypting means for decrjjpting the re-encrypted data decrypting key using the 

26 second private key. 




The system as de 
f broadcast times for 



ined in claim 19, wherein the promotional metadata contains a schedule 
the data. 
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21/^ A user's system for securely receiving data from a web broadcast infrastructure with a 
^plurality of channels, comprising: 

a receiver for receiving promotional metadata from a first web broadcast channel, the 
promotional metadata related to data av iilable for reception; 

an interface to an output device for presenting at least part of the promotional metadata for 
review by a user; 

an interface to an input device for receiving a selection by a user of the data to be received 
related to the promotional metadata; . 

a controller for controlling the rtceiver to receive data from a second web broadcast 
channel, the data selected from the prDmotional metadata, and wherein the data has been 
previously encrypted using a first encryj >ting key; and 

an interface for receiving the first decrypting key via a computer readable medium, the first 
decrypting key for decrypting at least some of the data received via the second web broadcast 



channel. 




user's system as defined in claim 21, wherein the output device is a web browser and 
put device is coupled to the^web browser for receiving a selection by a user. 



23. The user's system aylefined in claim 21, wherein the controller further comprises: 
a schedule derivecmom the promotional metadata wherein the schedule is used to control 

the receiver to receive data from a second web broadcast channel. 

24. The user's system as defined in claim 21 , wherein the receiver is adapted to receive data 
broadcasted in a format compatible wiih DirecPC™. 
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